DPDP Notice & Your Data Rights

Clear notice before processing

HORE presents privacy links at login and registration and separates core-service processing from optional analytics/marketing choices. The registration flow requires an affirmative acknowledgement before an account is created.

What you can ask HORE to do

1. Access: ask for a summary of personal data and processing associated with your account.
2. Correction: update inaccurate or incomplete account/profile information.
3. Erasure: request deletion of personal data that is no longer required, subject to lawful retention obligations and unresolved disputes/security needs.
4. Withdraw consent: change optional consent choices and request withdrawal where processing relies on consent.
5. Grievance: raise a privacy complaint and receive a trackable request record when the DPDP backend patch is deployed.
6. Nomination: submit details of a nominee for applicable rights in the event contemplated by law, once identity and implementation requirements are configured.

Open Privacy & Data Rights →

DPDP Rules timing

The Digital Personal Data Protection Rules, 2025 were notified in November 2025 with phased commencement. HORE's UI is built ahead of the later operational dates so privacy notice, consent choices and rights workflows do not need to be added at the last moment. Exact legal duties depend on the provisions in force at the relevant time and HORE's role and scale.

Consent is not bundled with marketing

Core processing needed to authenticate you and provide the requested HORE service is described separately from optional marketing/analytics preferences. Optional choices can be changed later from the Privacy & Data Rights area.

No dark patterns

Privacy choices should use clear language and similar effort for accepting or rejecting optional processing. HORE should not make a customer accept marketing in order to search properties, maintain an account or exercise a statutory privacy right.

Identity verification

HORE may need to verify that a rights request belongs to you before disclosing, correcting or erasing account data. Verification should be proportionate and should not be used to collect unrelated information.